MerlinW[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

MerlinW.exe
Size

466KB
MD5

9f576cdf928167f2f88459a42f1e5235
SHA1

11452e6128cdc96b87882853f2d3508dee801a77
SHA256

9cc36389d2563f59ff8ab9267c2f0ec676cca5abf1c76d0aa6f11e4597a944fb
SHA512

60ad36cac29fe829424392b8a6c1991161e98fbe31c1194a62ce806933e9d61a9e6af7d20e978d6d1c1d20fabe157b4b6a894486efdc17353e80729674e5956b
SSDEEP

6144:nHHZGKh7/9iiIdfnV034x2g3BP8/DVx6HRmUBq5py47:H5Fh7/9iiIdfnV0Fg3B0/hxYcr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MerlinW.exe

Files

MerlinW.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 430KB - Virtual size: 429KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ